Solved Happili redirect problem. Is it fixable or one of those rootkits?

[tonyneedshelp]

So I started getting redirected to happili for some searches in google chrome. A few times it redirected me to some other random webpage. I fear that I got this problem by connecting to an unsecured network last night. I ran combofix to see if that would work but I still get redirected. I have attached the log if anyone wants to take a look at it. Please help, I would greatly appreciate it.

 

[tman69]

read this:

Remove Happili Redirect Virus (Uninstall Guide)


follow instructions 'carefully'

 

[tonyneedshelp]

I ran the Panda ZeroAccess remover but I am still getting redirects. I'm on a 64 bit so I can't run the other removers. The TDSS Killer by Kapersky doesn't even detect anything... If I let this thing linger on my computer will it destroy my computer slowly? If I have to resort to a clean OS install will moving my personal files from this infected computer affect the new OS? Meaning are my personal files corrupt? Also, I did a few things Jacee told other users to do. If this is a rootkit or whatever, am I in danger of getting my passwords stolen and stuff like that? What dangers am I facing?

 

[Jacee]

Uninstall Firefox and remove user data and/or settings if asked.
Uninstall all Google applications
Uninstall Start Search Toolbar

Next, flush the DNS cache and restore MS's Hosts file.
Copy and paste these lines in Note pad.

@Echo on
pushd\windows\system32\drivers\etc
attrib -h -s -r hosts
echo 127.0.0.1 localhost>HOSTS
attrib +r +h +s hosts
popd
ipconfig /release
ipconfig /renew
ipconfig /flushdns
netsh winsock reset all
netsh int ip reset all
shutdown -r -t 1
del %0

Save as flush.bat to your desktop.
Double click on the flush.bat file to run it.Vista and Windows 7... right click the .bat file and choose to run as Administrator. Your computer will reboot itself.

Now download TFC by Old Timer TFC - Temp File Cleaner by OldTimer - Geeks to Go Forums and save it to your desktop.
Save any unsaved work. TFC will close ALL open programs including your browser!
Double-click on TFC.exe to run it. If you are using Vista/Windows 7 right-click on the file and choose Run As Administrator.
Click the Start button to begin the cleaning process and let it run uninterrupted to completion.
Important! If TFC prompts you to reboot, please do so immediately. If not prompted, manually reboot the machine anyway to ensure a complete clean.

After rebooting, you will need a running Anti-virus program Microsoft Security Essentials - Free Antivirus for Windows
Install and run Microsoft Security Essentials.

Update Java!

• Download the latest version of Java Runtime Environment (JRE) 7.
  Java SE Downloads
• Scroll down to where it says "Java Runtime Environment (JRE) 7u3 allows end-users to run Java applications".
• Click the "Download" button to the right.
• Check the box that says: "Accept License Agreement".
• The page will refresh.
• Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
• Close any programs you may have running - especially your web browser.
• Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
• Check any item with Java Runtime Environment (JRE or J2SE) in the name.
• Click the Remove or Change/Remove button.
• Repeat as many times as necessary to remove each Java versions.
• Reboot your computer once all Java components are removed.
• Then from your desktop double-click on jre-7u3-windows-i586-p.exe to install the newest version.

Now you can re-install Firefox.

 

[tman69]

more info here:

Remove Happili redirect, removal instructions

and here:

Happili redirect - how to remove

and here:

Dedicated 2-viruses » How to fix Google Redirect Virus (browser hijacker) problem

also follow the instructions from Jacee.

good luck...am out

 

[tonyneedshelp]

The problem seems to have gone away. I am no longer redirected. Thank you so much Jacee, you saved me from doing a clean OS install. How much of a threat was this? Am I good?

 

[Jacee]

Thank you for replying back tony ...
Set a "clean/new restore point" now, so you won't have the 're-direct date listed'
http://www.sevenforums.com/tutorials/697-system-restore-point-create.html